Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft
File:                     4RvPp2LU9ssvatCdA6lA4P6qAfg.mft (raw, json)
Hash identifier:          /YMRC+edi6YJPOyGr2tBNXVVi1cAo6MAYXuO177mtEw=
Subject key identifier:   1A:C9:FE:69:E0:B7:9E:2C:FC:D1:F9:A3:C5:75:D0:5F:28:E8:3A:53
Authority key identifier: E1:1B:CF:A7:62:D4:F6:CB:2F:6A:D0:9D:03:A9:40:E0:FE:AA:01:F8
Certificate issuer:       /CN=A91200F5/serialNumber=E11BCFA762D4F6CB2F6AD09D03A940E0FEAA01F8
Certificate serial:       1F9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft
Manifest number:          1F91
Signing time:             Wed 20 May 2026 16:00:06 +0000
Manifest this update:     Wed 20 May 2026 16:00:05 +0000
Manifest next update:     Wed 27 May 2026 16:00:05 +0000
Files and hashes:         1: 4RvPp2LU9ssvatCdA6lA4P6qAfg.crl (hash: sDxfENaaEn8MVMuWydit2lGY6uEpFJPblC8YcLwkUgI=)
                          2: DB92DE200AEF11ECB7243C0FC4F9AE02.roa (hash: xGGqt7PonDXd5/R0eJ3zZiprAo1GTVFsIsSPuxegtug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.crl
                          rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 16:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8091 (0x1f9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91200F5, serialNumber=E11BCFA762D4F6CB2F6AD09D03A940E0FEAA01F8
        Validity
            Not Before: May 20 16:00:05 2026 GMT
            Not After : May 27 16:00:05 2026 GMT
        Subject: CN=6a0dda86-fcb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:94:9c:ec:58:76:61:11:3e:39:5b:e0:b4:c6:
                    4f:94:4d:fc:ff:f4:29:d0:be:19:da:d8:67:8e:5f:
                    8b:4c:8d:24:a1:2a:f6:42:37:fb:2b:2f:b4:c3:42:
                    d9:37:c9:e7:d2:8f:6c:30:f2:c7:45:69:2c:cf:54:
                    92:ae:28:d8:f8:bf:06:67:15:9e:c9:a5:9a:1a:ec:
                    9f:c4:63:5f:f5:8f:5b:d4:a0:b9:cd:44:ca:fc:86:
                    cd:40:2b:85:99:ca:45:61:fb:28:0a:a3:04:d6:c0:
                    a2:5a:60:f8:89:18:14:1a:14:81:05:1c:00:ed:e0:
                    c2:aa:5a:a8:5a:b2:b7:34:9f:dd:7a:ec:5d:e5:07:
                    00:d9:7c:64:14:65:3c:c7:12:7d:ae:4c:23:a6:14:
                    5c:8b:c2:c8:f0:69:98:28:bd:6d:83:e2:1d:43:42:
                    b0:09:50:04:46:55:05:0a:d3:74:d6:ae:12:da:d1:
                    0e:83:70:79:14:b1:61:2d:c1:0d:38:f2:98:b4:1e:
                    e1:63:e8:12:cd:26:35:11:f4:94:0d:3a:b1:5f:fe:
                    87:a1:d5:a5:12:11:e0:57:98:20:4d:4d:6f:bf:7b:
                    dc:f8:57:c9:02:7b:13:d6:78:9f:98:18:11:20:5c:
                    6d:c6:75:ec:8e:60:a4:e1:f0:59:5e:7b:14:7d:ef:
                    e3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C9:FE:69:E0:B7:9E:2C:FC:D1:F9:A3:C5:75:D0:5F:28:E8:3A:53
            X509v3 Authority Key Identifier:
                keyid:E1:1B:CF:A7:62:D4:F6:CB:2F:6A:D0:9D:03:A9:40:E0:FE:AA:01:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:4d:0e:d3:6f:10:72:b7:b2:55:0f:b1:d6:28:75:9f:e7:bc:
         40:81:31:e9:37:57:48:8d:40:cc:9e:6d:71:2f:bb:6b:5b:1b:
         93:6f:db:19:a8:2a:d5:57:1d:74:7b:11:d6:6b:7d:d8:78:9e:
         e4:52:33:b1:2f:c0:e3:dc:26:7e:93:47:39:05:3d:7d:b7:c0:
         5f:f5:98:ab:c9:e7:9c:e7:0b:37:39:fc:b6:54:0b:e1:8e:5f:
         5a:d5:50:72:a8:64:b2:74:17:c7:41:05:e3:ac:08:77:e0:7d:
         ab:15:16:9d:f9:b8:09:de:5d:30:68:f9:42:44:32:0f:fb:06:
         98:43:d2:9f:c9:77:11:a0:13:94:4a:d1:e2:83:9f:6b:04:ea:
         ce:4c:94:3f:d3:50:7e:8f:cf:77:e0:d8:6d:bd:62:59:d8:9a:
         6c:1d:9f:d7:55:45:84:f0:5e:c0:be:05:71:50:15:c3:69:0a:
         8a:d1:f1:76:99:ec:c0:83:d6:91:92:a4:ae:d7:bd:6a:a6:3a:
         33:9c:e0:85:ef:ef:9f:b0:ee:70:2c:db:b9:c5:c0:0c:c7:9c:
         07:2d:10:23:ff:ef:76:54:f4:10:65:6d:6c:6d:0d:9c:41:c6:
         70:36:6e:14:f6:bf:4d:ba:de:07:9f:f2:30:12:ee:fc:ec:6a:
         8a:c9:f9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:19:32 2026 by rpki-client